Bug report: Security Concern Conflict with WordFence

  • Resolved Terri Ann

    (@terriann)


    7 years, 11 months ago

    Plugins
    Minimal Coming Soon & Maintenance Mode v1.45
    Wordfence v6.3.22

    Steps to Reproduce
    With Wordfence (free license) enabled and MCS&MM enabled I submitted settings on the MCS&MM plugin’s settings page I am met with a 403 error page that reads (I’m paraphrasing cause I can’t get my screenshot added.

    403 Forbidden
    A Potentially unsafe operation has been detected in your request to this site, and has been blocked by Wordfence.
    If you are an admin and are certain this is a false positive you can whitelist this request.
    [] I am certain this is a false positive

    [ whitelist this action ]

    I am saving settings with Analytics code, not sure if that might be what Wordfence is picking up?

    I managed to reproduce this in two different environments but after I submit the form, with the checkbox ticked to whitelist the request, the message no longer displays. It will probably only be an issue the first time I save the MCS&MM settings with Wordfence enabled on a site.

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author WebFactory

    (@webfactory)

    7 years, 11 months ago

    Hi Terri,
    Thank you so much for this detailed report! It’s very helpful! We’ll reproduce it ASAP and see what kind of solution we can come up with.

    I’ll update the thread as soon as we have something.

    Plugin Author WebFactory

    (@webfactory)

    7 years, 11 months ago

    Hi, a quick update.
    We managed to reproduce this behaviour on some (not all) of our test sites and as you noted once whitelisted the message no longer appears. We’re further investigating and working on getting the message not displayed at all. Again, thank you so much for reporting this!

    Plugin Author WebFactory

    (@webfactory)

    7 years, 9 months ago

    Again, thank you very much for bringing this to our attention. We’ve made some code changes and this issue should no longer happen.

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Bug report: Security Concern Conflict with WordFence’ is closed to new replies.